Active Directory Certificate Services (ADCS) enumeration library with BloodHound CE v6 export support

A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

firepwd.py, an open source tool to decrypt Mozilla protected passwords

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)

AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64

📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

SeImpersonate privilege escalation tool for Windows 8 - 11 and Windows Server 2012 - 2022 with extensive PowerShell and .NET reflection support.

A collection of useful tools and scripts were developed and gathered throughout the Offensive Security's PEN-300 (OSEP) course.

Collection of C# projects. Useful for pentesting and redteaming.

Interract with Microsoft SQL Server (MS SQL | MSSQL) servers and their linked instances in restricted environments, without the need for complex T-SQL queries.

Enhanced version of impacket's mssqlclient.py. It lets you interact with Microsoft SQL Server (MS SQL / MSSQL) servers and their linked instances, impersonating any account encountered along the wa…

Backport of SliverStager to work with DotNetToJScript for vba

ConPtyShell - Fully Interactive Reverse Shell for Windows

Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory environments

This code was used for the blogpost on secjuice.

is a collection of custom-built payloads designed to bypass modern Antivirus (AV) and Endpoint Detection and Response (EDR) systems. This project focuses on multiple payload formats and evasion tec…

PoC exploit for the vulnerable (eb.sys or UnknownKiller.sys) – weaponized to kill protected EDR/AV processes via BYOVD.

Adversary Emulation Framework

uac bypass

2018 School project - PoC of malware code obfuscation in Word macros

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

Zabbix Frontend Authentication Bypass Vulnerability

cve-2022-23131 zabbix-saml-bypass-exp

Simple C++ PoC of SeDebugPrivilege Privesc

Partial python implementation of SharpGPOAbuse

Buggy script to play with GPOs